60.375 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.375 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2021-21058 | HIGH 7.8 | adobe acrobat Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could lever | 2.6% | — |
| CVE-2019-1330 | MED 6.5 | microsoft sharepoint_enterprise_server An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1329. | 2.6% | — |
| CVE-2019-1260 | MED 6.5 | microsoft sharepoint_enterprise_server An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. | 2.6% | — |
| CVE-2020-17511 | MED 6.5 | apache airflow In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field. | 2.6% | — |
| CVE-2013-3887 | MED 4.9 | microsoft windows_7 The Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows local users to obtai | 2.6% | — |
| CVE-2011-2338 | HIGH 7.6 | apple itunes WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other | 2.6% | — |
| CVE-2000-0289 | MED 5.0 | debian debian_linux IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection. | 2.6% | — |
| CVE-2023-26417 | HIGH 7.8 | adobe acrobat Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in | 2.6% | — |
| CVE-2022-30171 | MED 5.5 | microsoft office_online_server Microsoft Office Information Disclosure Vulnerability | 2.6% | — |
| CVE-2017-13885 | HIGH 8.8 | apple icloud An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKi | 2.6% | — |
| CVE-2020-3440 | MED 6.5 | cisco webex_meetings A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website t | 2.6% | — |
| CVE-2016-6811 | HIGH 8.8 | apache hadoop In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. | 2.6% | — |
| CVE-2008-1286 | HIGH 7.8 | sun java_web_console Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or directories via unknown vectors. | 2.6% | — |
| CVE-2024-30019 | MED 6.5 | microsoft windows_server_2008 DHCP Server Service Denial of Service Vulnerability | 2.6% | — |
| CVE-2024-30011 | MED 6.5 | microsoft windows_server_2012 Windows Hyper-V Denial of Service Vulnerability | 2.6% | — |
| CVE-2018-0377 | CRIT 9.8 | cisco mobility_services_engine A vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite before 18.1.0 could allow an unauthenticated, remote attacker to directly connect to the OSGi interface. The vulnerability is due to a lack of authentication. An atta | 2.6% | — |
| CVE-2018-0376 | CRIT 9.8 | cisco mobility_services_engine A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to access the Policy Builder interface. The vulnerability is due to a lack of authentication. An attacker could exploit this vul | 2.6% | — |
| CVE-2018-0374 | CRIT 9.8 | cisco mobility_services_engine A vulnerability in the Policy Builder database of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to connect directly to the Policy Builder database. The vulnerability is due to a lack of authentication. An attacker could explo | 2.6% | — |
| CVE-2018-0982 | HIGH 7.0 | microsoft windows_10 An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. | 2.6% | — |
| CVE-1999-0216 | MED 5.0 | gnu inet Denial of service of inetd on Linux through SYN and RST packets. | 2.6% | — |
| CVE-2020-17414 | HIGH 7.8 | foxitsoftware foxit_reader This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The s | 2.6% | — |
| CVE-2024-49075 | HIGH 7.5 | microsoft windows_10_1809 Windows Remote Desktop Services Denial of Service Vulnerability | 2.6% | — |
| CVE-2007-3843 | MED 4.3 | linux linux_kernel The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite s | 2.6% | — |
| CVE-2021-34458 | CRIT 9.9 | microsoft windows_server_2016 Windows Kernel Remote Code Execution Vulnerability | 2.6% | — |
| CVE-2018-0403 | CRIT 9.8 | cisco unified_contact_center_express Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to retrieve a cleartext password. Cisco Bug IDs: CSCvg71040. | 2.6% | — |